Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/YB8ej6KnWGEExAGGrSfskuZtTTk.roa
File: YB8ej6KnWGEExAGGrSfskuZtTTk.roa (raw, json)
Hash identifier: 1LoGEHs2Ks5Z70aFcA46UKvUbvEKd5PV3plSUN2e1x4=
Subject key identifier: 60:1F:1E:8F:A2:A7:58:61:04:C4:01:86:AD:27:EC:92:E6:6D:4D:39
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 0188D2130FCF10BD04E8E2B96AEDC86C061D
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/YB8ej6KnWGEExAGGrSfskuZtTTk.roa
Signing time: Mon 19 Jun 2023 05:14:04 +0000
ROA not before: Mon 19 Jun 2023 05:14:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41944
IP address blocks: 37.139.48.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d2:13:0f:cf:10:bd:04:e8:e2:b9:6a:ed:c8:6c:06:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jun 19 05:14:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=601f1e8fa2a7586104c40186ad27ec92e66d4d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:fb:9b:6c:4f:43:cf:52:4c:40:9f:14:9a:1d:
09:d4:08:c5:c2:45:4d:d1:0c:37:f6:52:1a:c6:28:
ee:80:f3:80:f5:5f:fd:c4:52:bd:f2:ea:d8:f4:05:
45:a6:14:a1:d5:d5:0e:3a:54:98:b0:65:95:a2:1d:
9b:72:ec:40:d0:a7:37:32:1c:04:b4:4f:20:8f:63:
95:07:7a:f4:e1:ca:c9:a1:e2:5e:71:4d:55:ee:d2:
9a:12:f0:8d:3e:19:12:b4:b1:f7:88:79:45:67:f8:
a1:b6:ff:86:3b:db:3b:52:3d:7e:ff:6f:cd:82:96:
a7:21:be:ac:6b:26:73:0b:28:60:f9:d5:98:e7:b0:
de:eb:d3:74:88:93:88:1e:52:84:18:d9:6b:c0:66:
51:1b:6e:fb:c2:5e:27:95:d7:63:84:1a:32:b2:7d:
9d:21:eb:00:c3:c9:9d:01:10:2b:0c:6f:00:f0:94:
26:2b:19:b3:eb:f7:2a:c9:65:d1:4b:87:ab:cd:cb:
0f:77:ee:9c:b8:9c:a1:6b:2b:26:f8:09:6a:1c:d8:
12:f0:ea:21:e4:64:51:06:15:b1:47:cb:53:ad:72:
8a:05:a2:11:30:b5:10:d6:7c:77:38:d2:f9:08:0b:
ed:ed:ac:d9:94:d4:49:04:ff:14:f3:ce:bb:08:67:
b6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:1F:1E:8F:A2:A7:58:61:04:C4:01:86:AD:27:EC:92:E6:6D:4D:39
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/YB8ej6KnWGEExAGGrSfskuZtTTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.48.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:d8:b7:71:75:ca:fd:df:9a:d5:9e:1e:bb:9e:cf:7d:a9:73:
a5:f5:76:fc:a3:a3:5f:48:be:c8:57:64:07:dc:26:12:8d:7b:
92:c2:9d:d8:83:73:a3:ab:c1:75:e6:3e:15:91:fc:2f:a7:67:
20:09:03:0a:eb:80:7d:a9:50:c7:cf:1d:49:98:1b:b6:79:45:
1f:05:f4:a6:2e:55:b7:62:fd:c9:df:3f:f3:e1:2c:de:4a:41:
a3:01:0c:73:1b:a8:e3:aa:6a:b3:33:cd:52:ca:75:c2:39:b3:
74:b1:24:53:96:76:a9:c3:ed:64:84:ce:fd:cb:3e:39:17:7b:
db:e5:1c:4a:ff:39:51:47:88:86:24:62:2b:16:f1:e0:09:57:
84:80:46:68:3f:65:3d:6a:19:47:bd:66:9f:31:2a:ae:25:27:
c0:a1:b4:52:24:9a:3c:72:8e:09:fc:10:d0:0b:02:5d:00:eb:
b6:06:60:37:94:46:a3:b7:33:3b:96:f6:68:a5:7f:c2:cd:de:
92:c7:64:74:0f:77:5c:87:bd:14:82:99:09:8d:85:ee:0e:36:
c0:d3:cf:66:d0:98:0e:ba:00:63:7f:36:25:43:38:df:d0:28:
c1:81:fd:5d:f4:d2:51:ff:26:ba:4c:19:b4:c8:7a:12:c0:da:
cd:5d:80:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:43 2023 by rpki-client on console-ams.rpki-client.org